Before you can use TACACS+ as the ARAP authentication method, you need to enable communication with the TACACS+ security server. For more information about establishing communication with a TACACS+ server, refer to the chapter “Configuring TACACS+.” ARAP Authentication Using a Group Name Use the aaa authentication arap { default | authentication-list } command with the group group-name method to specify a subset of RADIUS or TACACS+ servers to use as the ARAP authentication method. To specify and define the group name and the members of the group, use the aaa group server command. For example, use the aaa group server command to first define the members of group araprad :
Device> enable Device# configure terminal Device(config)# aaa group server radius araprad Device(config-sg-radius)# server 172.16.2.3 Device(config-sg-radius)# server 172.16.2 17 Device(config-sg-radius)# server 172.16.2.32 Device(config-sg-radius)# end This command specifies RADIUS servers 172.16.2.3, 172.16.2.17, and 172.16.2.32 as members of the group araprad . To specify group araprad as the method of user authentication at login when no other method list has been defined, enter the following command:
Device(config)# aaa authentication arap default group araprad Before you can use a group name as the ARAP authentication method, you need to enable communication with the RADIUS or TACACS+ security server. For more information about establishing communication with a RADIUS server, refer to the chapter “Configuring RADIUS.” For more information about establishing communication with a TACACS+ server, refer to the chapter “Configuring TACACS+.” NASI Authentication Using AAA NASI Authentication Using Enable Password Use the aaa authentication nasi command with the keyword enable to specify the enable password as the authentication method.
For example, to specify the enable password as the method of NASI user authentication when no other method list has been defined, use the following command: Devie(config)# aaa authentication nasi default enable Before you can use the enable password as the authentication method, you need to define the enable password. NASI Authentication Using Group RADIUS Use the aaa authentication nasi command with the group radius method to specify RADIUS as the NASI authentication method. For example, to specify RADIUS as the method of NASI user authentication when no other method list has been defined, enter the following command:
Device(config)# aaa authentication nasi default group radius Before you can use RADIUS as the NASI authentication method, you need to enable communication with the RADIUS security server. Configuring Authentication ARAP Authentication Using a Group Name Configuring Authentication 8